futurerestore-help

[brisk leaf]

its fine to stop it tho right?

[green onyx]

yes

[vivid nova]

Although i did have an idea for your gui @lilac wren

[wintry wind]

thanks i feel it's better wait for more time

[plucky hull]

I just downloaded the blobs for iOS 14.4 and 14.5, is that all I need to do to be able to upgrade later?

[vivid nova]

If it's not there, you can implement a wget function to download the ipsws based on the users selection for device type in a drop-down menu

Without having them go to ipsw.me

Then it would automatically extract the IPSW to get the files needed etc.. Or use pzip

Just a thought..

[green onyx]

idk how u would get wget on windows

but everything is possible

wait

is wget already in windows

[lilac wren]

#futurerestore-help message

Lol

[zealous bridge]

Hello

[green onyx]

hello

gm

[zealous bridge]

its 6pm

[lilac wren]

hi tanbeer!!

[zealous bridge]

hey

[lilac wren]

oh lol

[vivid nova]

Ok, I'm done

[zealous bridge]

wha-

[lilac wren]

nono it's a cool thought

[lilac wren]

I'll implement it just for you <3

[zealous bridge]

so what have i missed

[vivid nova]

[green onyx]

not much

[vivid nova]

It's the last time i do anything anymore

[lilac wren]

JTV, what's the purpose in downloading the IPSW though

like if --latest exists why get the iPSW through a program when it's easier to use a nice looking website

[vivid nova]

Don't you need the build manifest?

[astral oak]

how can i get around APTicket-APNonce mismatch error

[lilac wren]

not if you do --latest

[zealous bridge]

set your generator correctly

[zealous bridge]

build manifest is auto grabbed when using latest

[lilac wren]

^

[vivid nova]

But sometimes --latest isn't selected

[zealous bridge]

if you look at the logs more closely you can see when it does it

[zealous bridge]

in that case a BuildManifest does need to be specified

[lilac wren]

well if you don't use --latest, then you need the ipsw for sep and bb and buildmanifest

[zealous bridge]

there is no reason not to use latest tho

[brisk leaf]

Idk if you guys know anything abt how macOS handles disc space but once I upload say 30 gigs of files to iCloud Drive, will that immediately become accessible space?

[lilac wren]

downloading it through the gui would be kind of redundant, jailbreak telegram bot can already tell you what files you need

[astral oak]

any1 please

[vivid nova]

Use dimentio

[zealous bridge]

@lilac wren for now yeah it is useless, but if latest breaks again for windows or smth then it would def be useful

[lilac wren]

No, after it uploads Mac will delete the files from your device whenever it wants I think

[astral oak]

i saved via tss server im on ipad pro 4th gen cellular 14.0.1

[zealous bridge]

especially since ipsw.me’s api does allow getting the sep and bb seperately

[upbeat mason]

okay so --update worked great with FR GUI on iphone 7 plus. gonna try now on ipad pro 10.5 with --update!

[lilac wren]

ooh now this is useful, should also be easy to implement

[astral oak]

link?

[vivid nova]

[[dimentio]]

[mystic axle]

dimentio

PoC tool for setting/getting nonce without triggering KPP/KTRR/PAC. (requires tfp0)

Author

0x7ff

Version

2.0.0-1

Price

Free

Repo

1Conan

Bundle ID

com.0x7ff.dimentio

More Info

Click Here

1Conan • Page 1/5 · Mar 9, 2021, 6:15 PM

[vivid nova]

Dunno why they have to have odd names

[upbeat mason]

is there harm in using latest baseband for ipad 10.5 wifi? or is it necessary to use NO baseband?

[lilac wren]

I think it's necessary to use no baseband

[zealous bridge]

^

[astral oak]

ah ok, so need to be jailbroken to use

[vivid nova]

Usually you specify latest baseband, but then add no baseband at the end

Or fr will freak out

Tis what had to be done on Apple tv

[zealous bridge]

if it still happens after clearing files reboot and clear temp folders

[vivid nova]

I wouldn't use the guis for that

[zealous bridge]

its probably cached

[vivid nova]

Do that part manually

[brisk leaf]

That space just ended up marked as other :/

[zealous bridge]

guis have an option for no baseband

its exactly the same as using terminal for it

because all it does is change args

[brisk leaf]

I got 70 gigs of other now damn

Do u think that a restart could make it accessible?

[vivid nova]

Off topic

[lilac wren]

you can try

[vivid nova]

Theres a fix in #common-issues

[brisk leaf]

Mb

[lilac wren]

I think they're talking about Mac not iOS

[brisk leaf]

Yeah tryna clear up space for ipa to be extracted

Ipsw*

[vivid nova]

What ipa

Ah

Little do people know, if you put the ipsw on a flash drive and point FR to that...

[zealous bridge]

Still need at least 10 gigs on main drive

[celest basalt]

why does futurerestore freeze at "Odysseus for 64-bit support: yes"

[vivid nova]

No you don't

[zealous bridge]

You do

Cryptic said

[vivid nova]

For what?

[zealous bridge]

Since it extracts to temp dir

[vivid nova]

The ipsw is extracted on the flash

[zealous bridge]

No

[brisk leaf]

I would do that but my flash drive is also filled with gigs and gigs of videos just like my main drive

[vivid nova]

If they set extraction in tmp then that's just plain dumb

[zealous bridge]

Well it is

[vivid nova]

Eats up your hard drive

[vivid nova]

Flush your porn

[celest basalt]

oh it's stuck on connecting to usbmuxd

I straced it

[brisk leaf]

I wish it was porn but it’s much more boring than that
It’s hours and hours of math lecture zoom recordings that I’m procrastinating on watching 😭

[celest basalt]

sudo killall -9 usbmuxd && sudo usbmuxd fixed it

except it won't recognize it in recovery

[astral oak]

ive set as 0x111111111111 but stilol get error to update to 14.3 from 14.0.1

[vivid nova]

Why not stop procrastinating and watch?

[leaden kraken]

Hi
Can anyone confirm if I can futurerestore from 13.5 to 14.2 Iphone XS Max ?

[vivid nova]

Yes

[zealous bridge]

you can but it might not work

hit or miss

[vivid nova]

Honestly, updating to 14 isn't worth it

You'll regret it

[leaden kraken]

Will it force me to update to 14.4 if it doesn’t work?

[vivid nova]

Yea

[brisk leaf]

Cuz this class gives me anxiety

It’s calc and I hate calc

[leaden kraken]

Why it make me regret? Is it the battery drain issue?

[brisk leaf]

I’m honestly tired of 13.5

[leaden kraken]

Me to :/

[vivid nova]

No, just overall terrible tweak support, instability in jailbreaks

[brisk leaf]

True but I stopped heavily using tweaks on 13.5 anyway

[vivid nova]

That's fine, but there is the oddball random bootloop

[leaden kraken]

Yeah it still unstable but it will be stable by time and future updates

[brisk leaf]

Wtf after a restart why tf is the space still marked as iCloud Drive

30 gigs bruh

[leaden kraken]

I saw some people in Reddit they successfully FR to 14.2 is it work for only some people?

[zealous bridge]

yeah

you can try but it might not work

[brisk leaf]

Oh looks like it was still uploading

[leaden kraken]

I would try it but it might force me to update to the latest ios right?

[brisk leaf]

I’m so glad I have gig
Waiting for this to upload would’ve been hell otherwise

[brisk leaf]

Yes

[zealous bridge]

no

it won’t

[brisk leaf]

Oh?

[zealous bridge]

if you fail you’ll fail early

[leaden kraken]

So it’s save to try if it’s work or not?

[zealous bridge]

you can just exit recovery

as long as you dont mess up anything else

you can try

[brisk leaf]

Oh true

[leaden kraken]

Ok then I will try it tomorrow
Thanks a lot

[brisk leaf]

Wait so the worst thing that can happen is recovery mode?

I was scared for no reason

[zealous bridge]

Lot of misinfo going around

if you follow all the steps properly you should be fine

[brisk leaf]

Like what

^

[zealous bridge]

unplug the device during the restore

manually specify the wrong baseband

have a hebrew username on windows

[brisk leaf]

LMAO

[celest basalt]

if (username.isHebrew()) {
  iBoot.wipe();
}

[zealous bridge]

^

now just write that in hebrew for extra effect

[green onyx]

is reddit down

@zealous bridge do u speak hebrew

[zealous bridge]

No

[green onyx]

or can u read it

ah

[zealous bridge]

no

[celest basalt]

I used it just a minute ago

[green onyx]

[celest basalt]

reddit that is

[green onyx]

its down for me

[zealous bridge]

reddit isnt down and i cant speak hebrew

im like semi fluent in arabic tho

and im not middle eastern no

[green onyx]

@zealous bridge what languages can u speak/read

[celest basalt]

@green onyx

[green onyx]

wait what

[celest basalt]

oops

[green onyx]

lol

[celest basalt]

ignore that

accidentally pinged you somehow

[green onyx]

nice

[upbeat mason]

"Done: restoring succeeded!" on ipad 10.5 wifi, FR GUI using --update and --no-baseband

[zealous bridge]

fluent in english bengali, nearly fluent in arabic and german

[zealous bridge]

pog

[celest basalt]

lol futurerestore said failed to enter restore mode and kicked me back into normal mode

[zealous bridge]

have we got a failed restore yet with frgui

probably not

[zealous bridge]

lol

[green onyx]

well done!

[green onyx]

not frgui

[zealous bridge]

is ipwndfu working? kinda wanna restore a 14 device to 13 and test out baseband functionality

[green onyx]

with fr too

like terminal fr

[celest basalt]

lol reddit IS down

[valid adder]

@zealous bridge works fine

[green onyx]

lol

[zealous bridge]

ty

lmaooo

reddit down

[green onyx]

[valid adder]

@zealous bridge you just need to fix liboffsetfinder64 so need to compile everything from source, also fw keys proxy is needed(libipatcher repo python script wikiproxy.py)

[astral oak]

just found out that my APNonce had changed from when i saved my blobs on 14.3.. just read the device and it now showing a different APNonce

[zealous bridge]

cool, can i do this on ubuntu?

[valid adder]

well if your generator wasn't set when you saved blobs, apnonce will change @astral oak

@zealous bridge ubuntu and mac should both work yep

use my compile script

actually dont

use lukes for nonstatic

cuz u want dynamic liboffsetfinder64

to modify it

if its broken

[astral oak]

im on windows

[green onyx]

set generator

[zealous bridge]

is it those mach-o errors?

[lilac wren]

no it can't

[green onyx]

@astral oak upload ur blob to https://verify.shsh.host

and screenshot it here

[zealous bridge]

the only way the apnonce changes is if the generator changes

it does

[lilac wren]

the ap nonce does change when you update

[green onyx]

except for 1 guy lol

[lilac wren]

but if you just set the generator back then you'll get the sane ap nonce as before

[zealous bridge]

yes

[green onyx]

sm guy kept his apnonce

[brisk leaf]

Bruh I just found out that iCloud Drive doesn’t work the way I thought it did

[green onyx]

lmao

[zealous bridge]

who?

[brisk leaf]

It keeps file locally

Smh

[valid adder]

let me explain

guys

[green onyx]

alright

[lilac wren]

ooh lesson yay

[zealous bridge]

patience

[green onyx]

^

[lilac wren]

yes but not really, a generator can change without the nonce changing

[green onyx]

@astral oak what device is this

and when did u save the blob

i think he used blobsaver

[lilac wren]

you'll get the same ap nonce when you just set generator back

[astral oak]

iPad Pro 4th gen Cellular

[zealous bridge]

not true, the apnonce is the hash of the generator, meaning if the generator changes the apnonce will also change

[green onyx]

its a A12Z

[green onyx]

did u ever jailbreak the ipad

[lilac wren]

I don't think so, pretty sure a nonce is only created when you go to recovery or request an update right?

[valid adder]

so there is the nvram(non-volatile ram) meaning it stays after reboots. The only time it is changed is with updates or restores.

there is an nvram for setting the generator called com.apple.System.boot-nonce

apple uses it to keep the same apnonce during ota updates, because they need to reboot for it to work, if they don't set the boot-nonce generator, there tss request will be invalid, they can't depend on internet in restoremode to request a new tss.

so we stole an apple feature boot-nonce to set our own generator to reuse our tss requests(shsh blobs) 🙂

[zealous bridge]

no, the apnonce always exists

[fast creek]

Omygod i'm so tired, everytime get ERROR: Unable to set iBEC. 194 + gui win 10, faq doesn't help

[astral oak]

not sure b4 i think just b4 it got unsigned

[green onyx]

ur doing it wrong

[zealous bridge]

the generator is cleared every time an update or restore happens

[green onyx]

do up to step 7

[zealous bridge]

meaning the nonce changes

[green onyx]

did u ever jailbreak the ipad

yes or no

[zealous bridge]

libinsn required

[green onyx]

and did u use blobsaver

[zealous bridge]

guessing i need to compile that too

[valid adder]

the apnonce is the hash of the 16 digit hex generator

[astral oak]

yes its on unc)ver now but on 14.0.1 fw, im trying to upgrade it to 14.3

[valid adder]

except on a12-a14

[zealous bridge]

so if one changes it means the other has changed too

[lilac wren]

yeah but the nonce only changes if it's requested right? I don't think the phone just checks every second if the generator has changed

[green onyx]

answer the other questions

did u save it with blob saver

and when u saved it

were u jailbroken

[zealous bridge]

generator can change thru multiple reboots too

[green onyx]

yes or no for each question

[zealous bridge]

or if it enters recovery mode

[fast creek]

Well I need also to set nonce manually everytime after reboot?

[green onyx]

yes

[zealous bridge]

@valid adder am i just getting liboffsetfinder from tihmstars repo then?

[shy magnet]

BLUE CHEESE AND MY OFF WHITES

I BEEN DRANKIN CODEINE ALL NIGHT

[astral oak]

yes used blobsaver on 27th jan.. wasnt jailbroken until jailbreak came out for iOS 14 other week

[green onyx]

then no

ur blobs are useless

[shy magnet]

are any of yall baddies

or no

[green onyx]

u cant save blobs for A12+ without jailbreaking

bc entangled apnonce

[green onyx]

[zealous bridge]

86 | retcustomerror(out_of_range,"memstr failed to find "%s"",little);

what does that mean

[shy magnet]

i take that as a no

ok bye bye ugly people

[zealous bridge]

is libinsn broken or something

[shy magnet]

just comp futurerestore without libipatcher support

[zealous bridge]

need to use odysseus

[lilac wren]

but generator can change, ap nonce hasn't been hashed yet

[silent hollow]

omg finally a step forward after redownload the ipsw. the other was dmg i think

[valid adder]

@zealous bridge luke's compile script as a reference, you will just need some fixes if it doesn't work

[fast creek]

Can I give a try to restoring to 14.2 A11?

[zealous bridge]

if the generator changes, the apnonce will change too. immediately.

[astral oak]

i have blob from tss with same APNonce as on device for 14.4 fw

but unc0ver only goes uptot 14.3

[green onyx]

any blob u saved without being jailbroken wont work

just stay on 14.0.1

[green onyx]

from what ios version?

[astral oak]

ok, ive reupped my device to tss now whilst jailbroke

[valid adder]

you can only save blobs unjailbroken on a7-a11, a12-a14 need a jailbreak for blobs to be saved @astral oak

[fast creek]

13.5.1

[green onyx]

yes

[astral oak]

yes i have now 14.4 and 14.4.1 on tss on with the right APNonce

[valid adder]

cool

now u know

[astral oak]

suppose i just have to stay on 14.0.1 for now

[silent hollow]

any suggestions? :/

[valid adder]

full log

[green onyx]

uh what

hm

someguy had a similar error earlier

[zealous bridge]

I GOT THAT SAME FKIN ERROR

[green onyx]

irestore?

[zealous bridge]

yes

[valid adder]

full log

[shy magnet]

^

[green onyx]

@silent hollow are u using irestore?

[astral oak]

thanks for all your help guys 😉

[shy magnet]

does not matter

[valid adder]

ive seen it before both of you but it was weeks ago @zealous bridge

[shy magnet]

they're all dumb gui wrappers

that do the same

[zealous bridge]

yeah

prob

but

why

[silent hollow]

@green onyx nope

[shy magnet]

it might just be a corrupted IPSW

[zealous bridge]

that was a pita

[shy magnet]

ichitaso had that issue and it gave a similar error

[zealous bridge]

i restored with the same ipsw like 5 times

no way it was corrupt

this happened while i was testing both guis

it was my 3rd test out of five i did that day

all with the same ipsw and blobs

[valid adder]

well can't be fixed without a log anyway sadly'

because there is no error in that message

[silent hollow]

where is the log stored?

[zealous bridge]

when i got it there was nothing

apart from that

[valid adder]

just copy paste it

[zealous bridge]

literally everything else was bog standard

so

idk

it was on a9 anyway

so

[valid adder]

copy the entire thing

[zealous bridge]

it was fine

[valid adder]

save to pastebin

[lilac wren]

The device bootloaders (baseband, firmware, and SEP) generate a random number at the restore, then send them to iTunes which sends them to Apple...The number within the certificate is matched to the number generated on device
This is what iPhone wiki says

at restore

[fast creek]

I'm soo stupid

[green onyx]

open the link

[zealous bridge]

they all have seperate nonces

[green onyx]

and follow instructions

[lilac wren]

yes, generated at restore

[zealous bridge]

sep has its own nonce

[fast creek]

do this 3 times, no green screen

[valid adder]

@fast creek ignore that error

ffs

[green onyx]

yep

[valid adder]

its a warning

lmao

[zealous bridge]

can also be generated during an update

[green onyx]

@lilac wren u gotta change it to do steps 1 to 7

[zealous bridge]

or during recovery mode or multiple reboots

just because its not there

dont mean it doesnt happen

[valid adder]

im deleting ur messages until u listen to us

[zealous bridge]

for me the generator changes every reboot

[lilac wren]

yeah so it doesn't change the ap nonce immediately, only at restore?

[zealous bridge]

without fail

[zealous bridge]

updating and restoring go through similar processes

[celest basalt]

if the generator is set it should not change from a reboot, unless you JB with unc0ver which sets a new random generator for some reason

[zealous bridge]

it has a stage where it "verifies the restore / update"

[lilac wren]

so it is possible to have a generator set with a different ap nonce

but not when trying to restore

or in recovery mode

or updating

[celest basalt]

I exited recovery after a failed restore and the apnonce stayed the same (was using checkra1n)

[zealous bridge]

a generator is tied to ONE apnonce and ONE apnonce alone

if you know how hashes work

its similar

[green onyx]

whos msg

[celest basalt]

on A12+, apnonce = hash(some unique device ID + generator)

the exact algorithm is unknown but that's the idea

[valid adder]

@green onyx rapid

[green onyx]

ah

[lilac wren]

i'll try and explain better: if you set your generator to 0x1111, enter recovery, boom you have ap nonce 5a5a5a. if you jailbreak and set generator to 0x2222, your ap nonce is still 5a5a5a though right? says it's only generated at restore. that's what im trying to say

[celest basalt]

on A11 and lower, it's just hash(generator)

[green onyx]

yes

ur apnonce is tied to ur generator

[zealous bridge]

no

as soon as you enter the generator

the apnonce will change

you can see this clearly in dimentio

[green onyx]

oh i read 0x2222 as 0x1111

i cant read

[zealous bridge]

the entangled_nonce part will change every time you enter a new generator

even if its in normal mode

[lilac wren]

doesn't dimentio just calculate your nonce? or is it actually telling the device "hey, you're going to update!! generate an ap nonce now pls"

[zealous bridge]

now how would it calculate the nonce

[valid adder]

@celest basalt a12 nonce is:

apnonce = shasum384(0x1111111111111111);
apnonce = substring(apnonce, 64);
nonce_entangle(apnonce);

[celest basalt]

it is requesting it from the device

[zealous bridge]

the algorithm is unknown

so it cant "calculate" it

[valid adder]

its sha384 shortented to 64 chars @celest basalt

[zealous bridge]

its doing this

[celest basalt]

ah, and the entangle is the magic unknown hash right @valid adder ?

[valid adder]

prob

no idea about those details

[lilac wren]

so it's hashing it? or letting the device hash it and only reading it?

[zealous bridge]

the device will hash it

[valid adder]

@lilac wren apnonce has always been the hash of the generator

[zealous bridge]

dimentio doesnt hash anything

[valid adder]

its only entangled starting in a12

[lilac wren]

asking about dimentio or other on device ap nonce 'readers' specifically

[celest basalt]

if dimentio was just able to calculate apnonce itself then nonce entangle wouldn't be a problem when saving blobs, that would be too easy

[zealous bridge]

exactly

[celest basalt]

although technically you can read out the generator with mobilegestalt somehow

[silent hollow]

Cleaning up...
[exception]:
what=Device ApNonce does not match APTicket nonce

code=44498961
line=679
file=futurerestore.cpp
commit count=194:
commit sha =0ab9df3209ee599f581532d05d331e6abe0f53f3:
Done: restoring failed!

[lilac wren]

hashes are supposed to work like this though? that you can calculate the result but not the input

[silent hollow]

now getting this

gg

14.4 im coming

[valid adder]

a9 and below can be fully cracked with unsigned via sha1 shenanigans

[zealous bridge]

you can't calculate the input FROM the result

we already have the input

the generator

thats how hashes work

[valid adder]

@silent hollow that wasn't the full log

where is irestore log saved @zealous bridge

[zealous bridge]

it isnt afaik

[brisk leaf]

how long does the process take after extracting the filesystem?

[zealous bridge]

just copy and paste cmd

[zealous bridge]

depends on disk speed

oh after

[silent hollow]

i did this before and post it abvoe

[brisk leaf]

yeah after

[zealous bridge]

like 15-20 mins but can vary

[brisk leaf]

ok

oh its showing progress now

just took a minute and now its happening pretty fast

[celest basalt]

has anyone tested Linux

[valid adder]

@silent hollow and like I said that file is missing the the main part of it

[zealous bridge]

for

[green onyx]

for what

[celest basalt]

seems to fail at "Device can't enter to restore mode"

[green onyx]

retry

[zealous bridge]

ive restored plenty of times

using linux

[celest basalt]

I did with different cable too

[green onyx]

leave ur device in recovery

or if it isnt in recovery, enter it manually

[valid adder]

@silent hollow nvm got it

was further down

[zealous bridge]

might have to uninstall usbmuxd and install libusb

[valid adder]

in the log

[celest basalt]

I'm trying Windows now

[green onyx]

ibec error is a plague

[zealous bridge]

just compiled everything from luke's script, still getting that error. someone reported that using clang works, but wtf is clang? @valid adder

[celest basalt]

clang is a C/C++ compiler

[zealous bridge]

how does one use clang

[valid adder]

@zealous bridge screenshot log

[brisk leaf]

verifying restore lets go

[zealous bridge]

running sudo make

[celest basalt]

same error on Windows

Device can't enter to restore mode

[brisk leaf]

you gotta keep trying

restart fr while your still in recovery mode

[celest basalt]

it kicks me off to normal mode when it says that

[valid adder]

@zealous bridge you did the deps out of order

[green onyx]

enter manually

[brisk leaf]

manually enter then

[green onyx]

try a different port

[zealous bridge]

oh? tried to install liboffset but gave me an error that libinsn wasnt installed

[valid adder]

libgeneral is the dependent of all tihmstar packages hence why it says retcustom not found @zealous bridge

[zealous bridge]

oh

well

ty

[silent hollow]

so what should i do? Is there anything to do or im lost ?

[valid adder]

my script is more what you want except you don't want to compile static @zealous bridge

[zealous bridge]

can i just take a look at it for reference? just need to see deps and fixes

i can compile manually if need be

[celest basalt]

well, entering recovery works, just restore mode doesn't after sending iBEC

[brisk leaf]

uhhh
it hasnt failed yet but should i be worried by

ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.)<<<

[zealous bridge]

if its not failed

[celest basalt]

you used unsigned SEP/BB probably

[zealous bridge]

dont worry

[brisk leaf]

ye it just finisheddd

[celest basalt]

weird

it worked despite that?

[brisk leaf]

that was actually relatively painless

surprisingly

[zealous bridge]

ive seen it before

[brisk leaf]

ye

[zealous bridge]

@valid adder same error after compiling libgeneral

[thorn lintel]

hey i'm currently trying to future restore and my blob file is a notepad file does anyone know if that will effect the process if i drag it into cmd to restore?

[valid adder]

did you install them after building?

[zealous bridge]

yes

gonna try clang, apparently that might work

[valid adder]

@zealous bridge then just use the precompiled one first with wikiproxy and see what goes wrong

[brisk leaf]

damn its taking forever to boot up

[zealous bridge]

alr

dont i need rmvsigchks.py or something?

[valid adder]

@thorn lintel notepad has been deprecated since the early 2000's

@zealous bridge what device

[zealous bridge]

a9

[valid adder]

nah u need a mac for a9 afaik

[zealous bridge]

fuck

[silent hollow]

@valid adder so what should i do now?

[valid adder]

nothing u can do

[green onyx]

no it doesnt matter

[brisk leaf]

oh fuck

data recovery mode??

am i fucked?

[valid adder]

when did it download the update for it to recover from?

it didn't

its fixing userdata

[brisk leaf]

it says attempting data recovery

[valid adder]

yah but there was no point for it to download the update

so thats not what it is doing

[brisk leaf]

true

then whats it doing then

is my data gone?

[silent hollow]

just update to 14.4?

[brisk leaf]

i have no access to anything on my phone rn

[zealous bridge]

attempting data recovery is normal

[brisk leaf]

oh ok

reassuring

[zealous bridge]

after like 20-30 mins you'll have full access

fixing app and user data

[brisk leaf]

aight bet

[silent hollow]

so then i do a normal restore via itunes? And is there a way to downgrade afterwards?

[zealous bridge]

not on iP11

you're stuck until a jb comes out

for 14.4

[silent hollow]

because there is no nonsetter right?

[zealous bridge]

^ yes

[silent hollow]

shit happens thanks for your help ^^

[brisk leaf]

i would honestly be fine waiting on 14.4

[green onyx]

mhm

[brisk leaf]

i was tired of 13.5 anyway

[valid adder]

@zealous bridge so somehow the ipsw is corrupted ondevice asr verification failed

[lilac wren]

@zealous bridge taking some educated guesses here, but

if(key.generated == 1 && key.key_id == 0x8A3 && key.key_sz == 8 * kCCKeySizeAES128) {
  if(CCCrypt(kCCEncrypt, kCCAlgorithmAES128, 0, key.val, kCCKeySizeAES128, NULL, buf, sizeof(buf), buf, sizeof(buf), &out_sz) == kCCSuccess && out_sz == sizeof(buf)) {
    CC_SHA384(buf, sizeof(buf), entangled_nonce);
    ret = true;
  }
  break;
}

I see 'buf', looking back buf is

uint64_t buf[] = { 0, nonce };
so this is probably the generator

I see key 0x8A3

Generated by encrypting 0x568241656551e0cdf56ff84cc11a79ef with the UID-key (using AES-256-CBC). It is used during software upgrades on A12 and later to encrypt the "generator" value (using AES-128-CBC) before hashing it to become the nonce.
So it's fetching this encrypted generator or encrypting it itself, with this (again buf seems to be generator)

CCCrypt(kCCEncrypt, kCCAlgorithmAES128, 0, key.val, kCCKeySizeAES128, NULL, buf, sizeof(buf), buf, sizeof(buf), &out_sz

and then, it's doing

CC_SHA384(buf, sizeof(buf), entangled_nonce);

is this not the hashing of generator and nonce together?

This is why I thought dimentio is calculating, not fetching, the AP nonce. what you said a few weeks ago may have been correct: you cannot fetch ap nonce unless you're in recovery. dimentio is only calculating, which may be the reason it's in all caps as compared to futurerestore and blobsaver which fetch the ap nonce, and it's in lowercase—fetched is lowercase, calculated is uppercased

if this is wrong, can you show me what's actually going on then?

[zealous bridge]

probably something went wrong while sending it

[fast creek]

I bet everyone with usb problems trying this on shitty AMD platform computer

[green onyx]

i used fr on an amd computer

[valid adder]

@fast creek no we already fucking told u why

[green onyx]

and amd is pretty good

[orchid blade]

Hey guys i'm kinda stuck

[valid adder]

u dont listen to us

[green onyx]

ah

the ibec

[zealous bridge]

@lilac wren you're overcomplicating things

[green onyx]

just follow

[orchid blade]

this is what i'm getting

[zealous bridge]

the nonce is always present

[valid adder]

@orchid blade run again

just

run again

[zealous bridge]

it needs a nonce to check for ota updates and verify them with apple

[lilac wren]

No I'm attempting to read the source code lol, can you give me your interpretation of the code then

btw this is under the function/method called "entangle_nonce"

[valid adder]

nonce is for using tss signing tickets

@zealous bridge

[zealous bridge]

requesting them yeah

[brisk leaf]

how long does data recovery take

i didnt realize it would take this long

[valid adder]

its only used for anti replay, doesn't matter about checking for update itself @zealous bridge

[zealous bridge]

yeah i know thats not its primary function

[lilac wren]

this isn't the point lol, we were wondering when ap nonce is actually generated and set on device. dimentio cannot set this ap nonce obviously, otherwise there'd be no reason for a generator. When is the AP Nonce actually entangled and set by iOS? how does dimentio get this nonce then? I think it calculates, not forces iOS to entangle and set it's ap nonce

[zealous bridge]

but it does happen

[orchid blade]

i am now getting this

[zealous bridge]

what are you suggesting then? what does that change?

[brisk leaf]

how do they come up with all of this bullshit

[zealous bridge]

we can assume the encryption happens in nvram

[valid adder]

@lilac wren because the entanglement is hardware based, it calls the aes entangle function which calls the hardware aes func

[lilac wren]

that you can have a generator set with a different AP nonce currently set

[valid adder]

you can't grab the hardware key

[orchid blade]

I'm gonna reinstall itunes

[zealous bridge]

if we could calculate the apnonce from the generator nonce entangling would be pointless

[brisk leaf]

why they gotta make this shit so complicated

and all these mf made up words

[green onyx]

lmao true

@brisk leaf speaking facts

[valid adder]

its not madeup words

[zealous bridge]

the whole point is this is all hardware based and nothing within it can be exploited, doesn't matter if the setting is delayed for 1 second or 10

[green onyx]

ye ik

[valid adder]

they mean what they mean

[brisk leaf]

tf is a nonce

[zealous bridge]

well easily exploited

[green onyx]

u dont know what a nonce is

[zealous bridge]

a number than can be used once

[valid adder]

https://en.wikipedia.org/wiki/Cryptographic_nonce

@brisk leaf

[zealous bridge]

by definition

[brisk leaf]

ahh

so it is a real word

[zealous bridge]

yes

number

once

nonce

[valid adder]

yes its also a british curse word

[brisk leaf]

who thinks of this shit tho

[zealous bridge]

that too

[valid adder]

@brisk leaf its most likely a latin, greek, or roman root word that is relating to math in some way

thats how language works

[brisk leaf]

ig so

and thousands of ppl are paid to spend their entire day coming up wit this stuff

[valid adder]

yes because the world could not currently operate without it @brisk leaf

[brisk leaf]

true true

[valid adder]

the infrastructure needs it, so people study it

[brisk leaf]

still annoying how convoluted it is tho

[valid adder]

not really, i've only started understanding iOS 5 years ago, doesn't take that long

however i've been jailbreaking for more than 10 years

[brisk leaf]

5 years is a whole undergrad and a masters bruh

[zealous bridge]

@lilac wren when the generator is set in nvram, the whole point of it is non-volatile RAM, it's meant to retain readily accessible information, yes you're right in the fact that the apnonce isnt used until restore, but the fact that it's there signifies that there is a safeguard against re-using signed tickets, because even if you have a generator set with a different apnonce, you wont be able to take advantage of it in any way

[valid adder]

8th grade -> college

[brisk leaf]

non volatile ram exists?

[valid adder]

always has @brisk leaf

[green onyx]

tf is eduaction in the US

[brisk leaf]

i probably seem really dumb lol

[green onyx]

do u guys not have high school

or smthn

[valid adder]

@green onyx a shit show, college is useless

[green onyx]

[brisk leaf]

high school is 9 10 11 and 12

[green onyx]

im going to post-secondary.....

[brisk leaf]

thats college/university/after k-12 education

[valid adder]

@green onyx I was saying 5 years was between 8th grade and college

[zealous bridge]

@lilac wren i think what you're trying to say is, that the apnonce isn't "set" as in it's not gonna be used until the actual apticket requesting happens. but it is de facto set, there's nothing you can do to exploit it

[green onyx]

ah i see

[zealous bridge]

so it changes nothing

[lilac wren]

as I understand it, you need your hardware keys to encrypt a constant in order to get your AES hardware specific key.

UID Key + 0x568241656551e0cdf56ff84cc11a79ef = AES Key 0x8A3
AES Key 0x8A3 + generator = pre-entanglement generator. what dimentio here does,

CCCrypt(kCCEncrypt, kCCAlgorithmAES128, 0, key.val, kCCKeySizeAES128, NULL, buf, sizeof(buf), buf, sizeof(buf), &out_sz

So, this CC_SHA384(buf, sizeof(buf), entangled_nonce); actually hashes to get your final entangled nonce.

We use SHA384 to hash, we cannot go from the final ap nonce back to pretangle generator or anything before. The hash is working correctly, we can calculate the result. but it's still possible to calculate

[brisk leaf]

wouldnt that just be an ssd

[vivid nova]

I will say this @lilac wren: out of respect for the jailbreak community, you did a great job. I feel that this doesn't need to be posted on reddit or anything but here. But I, (among many others) do applaud you - and the testers for their efforts on getting the GUI looking/doing great! So thank you. Your tool does aid us in many ways and will be a great feature to have for the experienced and beginners alike.

Just wanted to chime in...

[brisk leaf]

@lilac wren wait ur the one who made the gui?

[valid adder]

yes but its raw data ram, an ssd would be a filesystem of data big difference @brisk leaf

[zealous bridge]

only from hardware itself tho

[brisk leaf]

thank you so fucking much
made it so much less painful

[valid adder]

and an ssd is not ram, its not random

[lilac wren]

never said it needed to be exploited, just hypothesized that it was possible for a generator set with either no nonce or previous/wrong ap nonce

[brisk leaf]

wait so an ssd is by definition organized?

any drive for that matter?

[lilac wren]

np it was fun

[valid adder]

@brisk leaf

[zealous bridge]

again, it might not be 'set' but no matter what you do that apnonce will generate

we can basically call it set

[lilac wren]

but not immediately

and not after 10 seconds

only after you go to recovery

[brisk leaf]

ah

[zealous bridge]

or request an apticket

using system info

or

[brisk leaf]

lets fucking go ios 14.2

[zealous bridge]

ota

[brisk leaf]

yessirrr

[lilac wren]

so this ^ and this

dimentio doesnt hash anything
were incorrect or no am I still misunderstanding

[valid adder]

this makes no sense why some devices sep panic but others load sep fine for 14.2 restore

[lilac wren]

aww this means a lot to hear it from you, glad we can both work together to help the community as a whole ❤️

[zealous bridge]

was wrong about the hashing, but i'm not wrong about the apnonce being set after the generator is. you can technically say that if the apnonce isnt set then the generator isnt set either, since you can't use it

[lilac wren]

i literally don't even know what language dimentio is in, I assume obj c or something, and don't know how iOS works or anything, so I could be totally off

[zealous bridge]

if that's how you want to refer to it as

[lilac wren]

ah so I think you're right here, AP Nonce is never actually set into iOS's filesystem or memory or anything. Only generated at recovery/ota/update

[brisk leaf]

this is completely off topic but i just looked at the screen time widget for the first time on ios 14.2
and why tf does it track how long ive been on pornhub wtf
has it always done that??

[lilac wren]

in safari yes

chrome and other browsers dont I believe

[zealous bridge]

probably lol, tho im guessing with enough info anyone could hash the generator into the apnonce

if you have the encryption method and hardware keys

[lilac wren]

this is what dimentio does though, but has to be done on device bc hardware keys

[zealous bridge]

so it can never be "read from device" until it connects with apples servers

which is what blobsaver does i imagine

[lilac wren]

Can blobsaver read offline though

We can try

[valid adder]

blobsaver runs irecovery -> apnonce via normal mode

I would think

I didn't look

[zealous bridge]

oh hold on

noncestatistics can get the apnonce too

and that can run offline

[valid adder]

noncestats is shitty software

[zealous bridge]

time to look at blobsaver source code

[valid adder]

yep libimobile

[zealous bridge]

what does that consist of then

[valid adder]

libirecovery

[celest basalt]

how long would it take to try all combinations with dimentio

probably long bc it takes a few seconds iirc

[lilac wren]

Shh!! That was my next blob analyzer feature haha

[valid adder]

blobsaver just gets nonce, it doesn't do what dimentio does

[zealous bridge]

bruteforce apple haha

[celest basalt]

even 1 per second is extremely slow

[lilac wren]

Yeah :( what about multithreading though

[zealous bridge]

bro there could be what 1 to the sixteenth power combos

[lilac wren]

Just spam like 100 at a time

[celest basalt]

doesn't work that way unless you have multiple devices

[lilac wren]

Ssh

[celest basalt]

but that's no good for A12+

bc nonce entangle makes it different for each device

[zealous bridge]

it would take as long as cracking a fully randomised 16-digit password @celest basalt

[celest basalt]

you can't multithread when it has to wait for the system to set the generator and read out the apnonce

[lilac wren]

Ooh I see

[valid adder]

internet speed too

so you have to break into the tatsu datacenter

and do it on a laptop

to go faster

[celest basalt]

just brute forcing apnonce/generator on device doesn't require internet though?

[lilac wren]

What about just faking generator in dimentio's hashing though

[zealous bridge]

no probably not

[valid adder]

yeh true

[zealous bridge]

because it can be calculated on device

with hardware aes keys

[lilac wren]

We have all hardware keys right so just change buf to 0x1111 + 1 every thread

[zealous bridge]

that would still take ages

trying every single generator combo?

[lilac wren]

But it's a cool project and one I was going to do nontheless

[green onyx]

u could open the blob

and check for generator

[lilac wren]

Can someone tell me how many combos there are for generator

[zealous bridge]

1 to the sixteenth power

[green onyx]

lots

[celest basalt]

actually longer bc generator is 16^16, just digits is 10^16

[lilac wren]

1^16th is still 1

Lmho

[green onyx]

lol

[zealous bridge]

nvm

[lilac wren]

1x1x1x1 XD

[zealous bridge]

what is hex

base 16

[celest basalt]

it's 16^16

[zealous bridge]

16 to the sixteenth power yeah

[lilac wren]

Ty

0-9 and A-F?

[zealous bridge]

yes

[celest basalt]

yep

[zealous bridge]

not capital tho

lowercase

[green onyx]

wait

r u actually bruteforcing the generator

[zealous bridge]

yeah they dont believe me when i say it would take ages

[brisk leaf]

damn unc0ver 6 is really unreliable

[lilac wren]

No, probably never going to work but I still want to try bc I was going to anyways

[green onyx]

@lilac wren is it possible for frgui to open the blob

and check generator of blob

and set it as that?

[lilac wren]

Yes lol

But that's boring

[green onyx]

ah i see

bruh

[lilac wren]

What I was going to do

[green onyx]

website?

[lilac wren]

Was going to ssh into device with frgui, use dimentio 0x111, try chimera's, and the blob's to see if it matches the ap nonce in the blob

[green onyx]

why try chimera's

[zealous bridge]

https://www.security.org/how-secure-is-my-password/

[zealous bridge]

also odyssey default

[lilac wren]

Bc maybe some people saved blobs with odyssey's

Odyssey and chimera is the same I believe

[zealous bridge]

0xbd34a880be0b53f3

[green onyx]

passphrase op

[fast creek]

heh well switched to normal computer and passed ibec error, but now stuck on Waiting for message from FDR

[green onyx]

thats my apple id password poggers

[zealous bridge]

@lilac wren how many guesses per second would you think you could achieve if you try to bruteforce the generator using hardware keys

lol

[lilac wren]

"Poggers" boom done

[green onyx]

keep waiting

poggers as a pw is 200 milliseconds

[zealous bridge]

lol

[lilac wren]

5 maybe? Haha I'll hope for more

[green onyx]

poggers in a passphrase is smthn more tho

[zealous bridge]

lol

it would be pointless on an A12+ device but it actually might be useful on A11

oh wait for A11 the algorithm is known already

nvm

[lilac wren]

5 with dimentio ssh, more if I can get dimentio's fake generator running after stealing hardware keys on their computer

[green onyx]

[zealous bridge]

heh whos gonna be alive to see the end of that bruteforce i wonder

[green onyx]

wait on whos computer

the users?

[lilac wren]

Ngl this is much more intense than the mincraft plug-ins I was making 3 weeks ago

[green onyx]

the morality of doing that isnt very moral

[lilac wren]

Yeah, that's what I assumed. Probably depends their gpu or whatever

[zealous bridge]

not like hes hacking into fort knox tho

[lilac wren]

Not paying for some super server for this

[zealous bridge]

5 guesses per second

lol

could run that on a mouldy potato

[lilac wren]

No 5 was on device with ssh

Definitely more if I can run dimentio on computer after stealing hardware keys

[zealous bridge]

you dont even need to run dimentio

just a standard encryption command is enough

[lilac wren]

Oh yeah, all we need is to encrypt and entangle, we don't need to get all the keys

[zealous bridge]

then you could embed into something which would try again after a failed attempt

[lilac wren]

No this is what would make it take ages, we need like 50 running concurrently regardless of the last attempt's result

[fast creek]

(-2)

Unable to receive data from FDR

[zealous bridge]

well then gpu bottlenecking will be extreme

[zealous bridge]

restoring to 14.2?

[fast creek]

y from 13.5.1

[zealous bridge]

doesnt work

so

have to stay on 13.5.1 if you dont have 14.3 blobs

[fast creek]

i have

[zealous bridge]

then why dont you restore to 14.3

[lilac wren]

Oh there's an issue, I only uh know java which is probably way too slow for this

[fast creek]

Thought it is a bad unstable version

[zealous bridge]

no

[ripe merlin]

there’s a glitch about imessage notifications i think

[zealous bridge]

on 14.3RC

[low summit]

14.3 is stable isn't it

[lilac wren]

Lol rip this guy, always read release notes

[ripe merlin]

ahh my bad

[zealous bridge]

14.3 is stable by definition and by usage

[lilac wren]

Literally before you download FR, in the assets, there's a text file that says "READ RELEASE NOTES" which say that 14.2 and below are half working

[low summit]

even if it is unstable 14.2 would be even more unstable

[zealous bridge]

lol if it couldnt handle logs you think it would handle massive bruteforcing attempts

[lilac wren]

Lol time to learn cpp

[fast creek]

I read this, but nevertheless, i wanted to try so

[zealous bridge]

rip

[green onyx]

[zealous bridge]

rip your brain

[green onyx]

why

would u go to 14.2

when u have 14.3 blobs

[low summit]

yea i dont get it either

[green onyx]

[lilac wren]

Lmho

[zealous bridge]

"very unstable release"

[low summit]

any probs 14.3 have 14.2 will have as well lol

[fast creek]

ama brainless last time

[fast creek]

ty every1

[green onyx]

np

[fast creek]

success 14.3

[zealous bridge]

god

[green onyx]

nice

[zealous bridge]

good

[orchid blade]

Well 14.2 almost worked but didn't wanna do the last push for me

[lilac wren]

If we did dimentio at 50 times a second, it would be done in 116988483 centuries

Assuming the last generator we try is correct, 0xFFFFFFFFFFFFFFFF

If we somehow managed to hash one hundred thousand times a second, it would only take 58494 centuries

[green onyx]

why u guys gotta do this lol

[lilac wren]

Lol bc my great great great great great x 10000 grandchild can have a phone on 14.3

If we wanted it done in 48 hours, we'd need to entangle 106,751,991,167,300 times a second

[zealous bridge]

why do i get an ibec error now

[lilac wren]

Lol did you install iTunes or something

[zealous bridge]

help guys how 2 fix ibec /s

idk

lol my sister is blaming me for roblox jailbreak detection

[green onyx]

lmao what

wait

roblox has jailbreak detection

[zealous bridge]

lol

[lilac wren]

Lol that's dumb

[zealous bridge]

and checkra1ns restore system button doesnt exist anymore

so

i have to flippin futurerestore

[lilac wren]

On they actually removed it?

How are you supposed to rootfs

[zealous bridge]

probably not but it doesnt come up for me

[green onyx]

did u install cydia

[zealous bridge]

yes

[green onyx]

[low summit]

doesn't uncover rootfs for u even if ur checkra1n

[lilac wren]

Saw you have to reboot and rejailbreak, then open it immediately

I think, but unc0ver doesn't work on 14.4

[green onyx]

^

[zealous bridge]

Pretty sure unc0ver tries to remove substitute when restoring rootfs

Which doesnt exist on checkra1n

because it uses substrate

[celest basalt]

Substitute 2.0 works on checkra1n if you don't restore rootfs from u0 though

also restore system button exists for me but you can also just do snappy -o in terminal

[zealous bridge]

Does that work with jailbreak detection tho?

[celest basalt]

depends, many of them check files in /var so a restore rootfs may not be enough

here's my FR log btw https://gist.github.com/nyuszika7h/bf83222fb7c82705d343071420afb598

is there a guide for future restoring on here?

trying to update my iphone x from ios 13.3 to ios 14

with blobs

[drowsy pagoda]

search pinned messages

[green onyx]

lmao what

[zealous bridge]

censoring UUID

[celest basalt]

I mean it probably doesn't matter that much but

[faint coral]

im very new at this is it possible to upgrade to ios 14.3 from 13.6 if i do not have blobs saved

[ripe merlin]

nah bro u need blobs

[green onyx]

no

and if u do have blobs, no

[lilac wren]

if they do have blobs, why not

[zealous bridge]

Might have misread that

[green onyx]

yep lmao

i read it as 14.3 to 13.6

[celest basalt]

I've been trying to upgrade my iphone using future restore GUI which is a new tool posted in the subreddit yesterday but every time I get an erro saying unable to restore device

any suggestions?

[zealous bridge]

send log

[userdirectory]/FutureRestore GUI/Logs

[celest basalt]

the whole thing or just the end?

k

@zealous bridge

Is that the right thing

[zealous bridge]

Yep

Are you restoring to 14.2?

[celest basalt]

14.0.1

Highest version I saved blobs for

On iPhone x

[zealous bridge]

You can’t restore below 14.3 on A11 and higher

[celest basalt]

Ah fuck I thought the iPhone x was a10

Damn

[zealous bridge]

iPhone 7 is A10

[celest basalt]

So if I haven't saved blobs already there is no way for me to update to 14 with a jailbreak?

[zealous bridge]

iPhone 8, 8+ and X are all A11

there is checkra1n but you won’t have Face ID or Apple Pay

[ripe merlin]

rookie question but how do i get it to say my device n version next to my name

[zealous bridge]

Or a passcode

[celest basalt]

Yeah no SEP protections

[zealous bridge]

#bot-commands !adddevice [device name]

[ripe merlin]

ohh thankyou

[celest basalt]

Dang ig I'll just chill on iOS 13 for now and update later when an iOS 14.4 JB comes out

[zealous bridge]

Save blobs too

For every version

[ripe merlin]

do you think it’s worth taking the risk to upgrade to 14.2? or should i just wait for a 14.4 jb

[zealous bridge]

what risk?

[ripe merlin]

i don’t have 14.3 blobs and FR isn’t guaranteed to work on 14.2

[zealous bridge]

ok? how is that a problem?

[upbeat mason]

"Done: restoring succeeded!" using FR GUI on iPhone X with --update

[zealous bridge]

it’s not like it’s the end of the world if it fails

[ripe merlin]

damn it’s true i’ll try it out tmrw

[zealous bridge]

you can just enjoy 13 for a while

theres no risk involved

either it works or it doesnt

[ripe merlin]

if it fails would it not force me to go to 14.4?

[upbeat mason]

so far iPhone 7 plus, iPhone X, and iPad Pro 10.5 wifi has worked with FR GUI

[zealous bridge]

no

[ripe merlin]

oh damn i heard some people say they had to go dfu and restore from itunes

if not i’ll attempt it tmrw thank you

[zealous bridge]

that’s only if you mess up the command

just follow tutorial properly and you should be fine

[ripe merlin]

ahh but i’m using the GUI i’m not good with the command line stuff

[zealous bridge]

ok so even less risk

the only way you can fuck up is if you pull out the phone during the restore

or having a hebrew username on windows

[ripe merlin]

oh okay cool i’ll be careful about that

thanks man have a good one

[zealous bridge]

ik but they said they didnt have blobs for higher than 14.0.1 so i just went with the consistent update versions

14.2 is a hit or miss anyway

[valid adder]

https://cdn.discordapp.com/attachments/809648240663724032/816861654842343444/unknown.png
https://cdn.discordapp.com/attachments/627601934463008796/818637882641612840/unknown.png

[zealous bridge]

SEP doesn’t like being restored on 14.2... lotta panics and non-responsive states... looks like an issue on apple’s side so I don’t think there will be a fix

[valid adder]

@sacred estuary

[zealous bridge]

Or that^

[valid adder]

It sometimes works which baffles us

Like why does it work for some devices but not others

It makes no sense

Yeh you can’t really flash baseband on a WiFi iPad

You have to use latest sep

There’s no using other sep

Sep has to be from a signed iOS

This log was from before 14.4.1 existed

They are also the same sep

So it doesn’t matter anyway

The problem isn’t sep

It’s the kernel

Most likely

[zealous bridge]

Nope

You’ll get an FDR error and unable to restore device

[valid adder]

It doesn’t fatal fail until after file system is sent

Nvram is cleared

So have to set nonce again

If it fails there

But the funny thing is this fdr fail failed right before the nvram clear

Literally the step before

No boot loop until sending fildystem

File system*

Gtg

[upbeat mason]

"Done: restoring succeeded!" iPhone SE (2016) using FR GUI with --update

[lilac wren]

congrats :)

Compiled dimentio, didn't edit its code (just wanted it to work). However it seems to be showing limited output. I ran as root, idk what the issue is. Regular dimentio works just fine

anyone willing to help

[celest basalt]

do you have libkrw installed

[lilac wren]

Yes

Regular dimentio is fine

I'll send entitlements one sec

It's the same as dimentio's so idk :/ https://github.com/0x7ff/dimentio/blob/main/tfp0.plist

[celest basalt]

oh self compiled missed that part

not sure whats wrong then

[dry lodge]

is diementio necessary if i am using unc0ver or odyssey jailbreak? or can i just set the generator (0x11**), run jailbreak and it's fine?

[celest basalt]

I would still use dimentio, unc0ver and Odyssey both have a broken nonce setter on the latest versions atm

[dry lodge]

any idea where i can grab the latest version and libkrw? im using odyssey on 13.5